05-14-2026 07:30 AM - edited 05-14-2026 07:32 AM
Hello community, I encountered this error when trying to update the certificate device on a PA 520 firewall, running PAN-12.1.4-h2. Is there a known solution to this problem?
05-15-2026 02:08 AM
Hi @Bryan01 ,
I've seen similar issues when renewal is failing because the `/opt/pancfg/mgmt/ssl/private` partition storing private keys and certificates, was 100% full, preventing the generation of new CSRs and other SSL operations.
Also could be related to PAN-313623 as seen in these release notes:
https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addresse...
I recommend reaching out to TAC to confirm you're hitting this issue.
Kind regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
